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1. (currently amended) A method for restricting access to a set of resources in a 
distributed data processing system, the method comprising: 

determining a set of authorized resources for which a user is authorized to access, 
wherein the set of authorized resources is a subset of the set of resources; 
obtaining state information about the set of authorized resources; 

evaluating availability of the set of authorized resources based upon the state information 
about the set of authorized resources; and 

in response to evaluating availability of the set of authorized resources, generating a list 
of a set of entitled resources for the user, wherein the set of entitled resources is a subset of the 
set of authorized resources ; and 

preventing the user from accessing resources that are in the set of authorized resources 
but that are not in the set of entitled resources . 

2. (original) The method of claim 1 further comprising: 
sending an indication of the set of entitled resources to the user. 

3. (original) The method of claim 1 further comprising: 
responding to requests for the user to access the set of entitled resources. 

4. (cancelled) 

5. (original) The method of claim 1 further comprising: 

considering user attributes of the user while evaluating availability of the set of 
authorized resources. 

6. (original) The method of claim 1 further comprising: 

performing the evaluation of availability of the set of authorized resources in accordance 
with a configurable rule associated with one or more resources in the set of authorized resources. 
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7. (original) The method of claim 1 further comprising: 

gathering state information for the set of resources using a distributed monitoring 
application. 

8. (currently amended) An apparatus for restricting access to a set of resources in a 
distributed data processing system, the apparatus comprising: 

means for determining a set of authorized resources for which a user is authorized to 
access, wherein the set of authorized resources is a subset of the set of resources; 

means for obtaining state information about the set of authorized resources; 

means for evaluating availability of the set of authorized resources based upon the state 
information about the set of authorized resources; and 

means for generating a list of a set of entitled resources for the user in response to 
evaluating availability of the set of authorized resources, wherein the set of entitled resources is a 
subset of the set of authorized resources ; and 

means for preventing the user from accessing resources that are in the set of authorized 
resources but that are not in the set of entitled resources . 

9. (original) The apparatus of claim 8 further comprising: 

means for sending an indication of the set of entitled resources to the user. 

10. (original) The apparatus of claim 8 further comprising: 

means for responding to requests for the user to access the set of entitled resources. 

1 1 . (cancelled) 

12. (original) The apparatus of claim 8 further comprising: 

means for considering user attributes of the user while evaluating availability of the set of 
authorized resources. 

13. (original) The apparatus of claim 8 further comprising: 
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means for performing the evaluation of availability of the set of authorized resources in 
accordance with a configurable rule associated with one or more resources in the set of 
authorized resources. 

14. (original) The apparatus of claim 8 further comprising: 

means for gathering state information for the set of resources using a distributed 
monitoring application. 

15. (currently amended) A computer program product in a computer readable medium 
for use in a distributed data processing system for restricting access to a set of resources, the 
computer program product comprising: 

means for determining a set of authorized resources for which a user is authorized to 
access, wherein the set of authorized resources is a subset of the set of resources; 

means for obtaining state information about the set of authorized resources; 

means for evaluating availability of the set of authorized resources based upon the state 
information about the set of authorized resources; and 

means for generating a list of a set of entitled resources for the user in response to 
evaluating availability of the set of authorized resources, wherein the set of entitled resources is a 
subset of the set of authorized resources; and 

means for preventing the user from accessing resources that are in the set of authorized 
resources but that are not in the set of entitled resources . 

16. (original) The computer program product of claim 15 further comprising: 
means for sending an indication of the set of entitled resources to the user. 

17. (original) The computer program product of claim 15 further comprising: 
means for responding to requests for the user to access the set of entitled resources. 

18. (cancelled) 
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19. (original) The computer program product of claim 15 further comprising: 
means for considering user attributes of the user while evaluating availability of the set of 

authorized resources. 

20. (original) The computer program product of claim 15 further comprising: 
means for performing the evaluation of availability of the set of authorized resources in 

accordance with a configurable rule associated with one or more resources in the set of 
authorized resources. 

21. (original) The computer program product of claim 15 further comprising: 
means for gathering state information for the set of resources using a distributed 

monitoring application. 



